28b18f42986be2e27e4bde0b1b611c5aea7eabe84ba4b94f52a70deffda194c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28b18f42986be2e27e4bde0b1b611c5aea7eabe84ba4b94f52a70deffda194c6
Size

48KB
MD5

1634f20140d7d94def27175a069da205
SHA1

dcb0b79835ca06f2e73b23ce45ffbeeb582e2d15
SHA256

28b18f42986be2e27e4bde0b1b611c5aea7eabe84ba4b94f52a70deffda194c6
SHA512

eaf0a561f2ad2b6c9885d962310d78da7dcb89ccbc3480e3d411655dbc03d8e60a680154652e3e5304edeb3d18d91c8eba477ca19ff4bb19c0c39f64130ca006
SSDEEP

768:ByfuhP8qM8zQMufmVU0z+Lo7tQqHuH2zl6:BRkds7t8H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28b18f42986be2e27e4bde0b1b611c5aea7eabe84ba4b94f52a70deffda194c6

Files

28b18f42986be2e27e4bde0b1b611c5aea7eabe84ba4b94f52a70deffda194c6
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ